HELP - I think I was just Hacked!
- From: Anonymous <cripto@xxxxxxx>
- Date: Thu, 24 Apr 2008 00:44:14 +0200 (CEST)
Oh my god, the absolute scariest thing just happened to me...
I was working on my server (logged in as a regular user), and I went to su, and got the message "who are you?", instead of the usual password prompt. I typed "whoami" and got "10000" - an ID, NOT my login name (which I would normally get).
I logged out, couldn't log back in... I went to webmin and noticed that usernames had been deleted... my username, the mysql username (and I don't know what else, yet). I had to recreate them. The root password had been reset to blank (and the port moved from a custom port back to 22)..
I am absolutely freaked out - I'm using 6.3-RELEASE-p1 (the latest) and I don't know what happened... It all happened right there while I was working on the server (and no - I'm 100% sure that I didn't accidentally do something stupid myself). I've changed the root password and username password, but this isn't going to solve how the person got in (assuming it was more sophisticated than a password guess).
Any ideas... has anyone ever heard of something like this before? Quick typing so I'm sure there's typos, sorry.
.
- Follow-Ups:
- Re: HELP - I think I was just Hacked!
- From: Lowell Gilbert
- Re: HELP - I think I was just Hacked!
- From: Martin Etteldorf
- Re: HELP - I think I was just Hacked!
- From: Jason Bourne
- Re: HELP - I think I was just Hacked!
- Prev by Date: OEM Headset Mics - Chinese Headset Mics Manufacturer
- Next by Date: Re: HELP - I think I was just Hacked!
- Previous by thread: OEM Headset Mics - Chinese Headset Mics Manufacturer
- Next by thread: Re: HELP - I think I was just Hacked!
- Index(es):
Relevant Pages
|